PHP Code Security 3-Ajax and Logical Payment Problem ("Zero Purchase")

3. AJAX Authentication and Related Logical Payments 1.AJAX Authentication Ajax definition: AJAX is not a specification of JavaScript, it's just an abbreviation for the brother's "invention": Asynchronous JavaScript and XML, meaning to execute asynchronous network requests using JavaScript. Asynchronous: refers to sending multiple d ...

Posted by deezin on Tue, 01 Feb 2022 07:37:56 +0100

2021-06-05 - Analysis of CSRF and XSS

Analysis of CSRF and XSS preface Bloggers recently had an interview and encountered a question: * * What are the principles of CSRF and XSS? How to prevent CSRF and XSS** Because the blogger didn't understand this part deeply enough, the answer in the interview was not comprehensive enough. Today, let's discuss the mystery behind CSRF and X ...

Posted by dazz_club on Sun, 30 Jan 2022 05:22:08 +0100

thinkphp5.1. session sharing solution for multi domain jump problem

Catalogue of series articles Recently, I encountered the problem of jumping from multiple domain names to session s. Here is a Demo to record my ideas Preparation conditions 1. Framework thinkphp5 one 2. apache server 3.MySQL database I Problem description Suppose I have two sites with different domain names, a.com and b.com, ...

Posted by Zooter on Sun, 30 Jan 2022 04:52:15 +0100

Install Let's Encrypt certificate through Certbot to realize free HTTPS access of the whole site

reference Install Let's Encrypt certificate through Certbot to realize HTTPS access of the whole station College army - upgrade blog application from HTTP protocol to HTTPS for free certbot official website address Open the home page and select your own system version first (the web server I use here is nginx and the system is centos7) Tran ...

Posted by knowNothing on Sat, 29 Jan 2022 19:52:49 +0100

[with source code] hard core | take you to develop a remote video monitoring project

Remote video surveillance The Internet of things has been unknowingly integrated into our life and brought convenience to us. For example, smart door locks, ETC electronic automatic charging system, ETC. at first, it felt very novel, and now it is used to it. It can even be said that the Internet of things is the inevitable trend of Internet ...

Posted by tensitY on Sat, 29 Jan 2022 01:32:49 +0100

[SUCTF 2019]EasyWeb --- no parameter RCE

SUCTF 2019]EasyWeb Test site: No alphanumeric shellUse htaccess upload fileBypass open_basedir Source code audit <?php function get_the_flag(){ // web admin will remove your upload file every 20 min!!!! $userdir = "upload/tmp_".md5($_SERVER['REMOTE_ADDR']); //Naming format (upload/tmp_md5(ip)) if(!file_exists($userdir)){ ...

Posted by chintupintu03 on Sat, 29 Jan 2022 01:15:05 +0100

PHP interactive MySQL realizes login and registration function

catalogue 1, Basic knowledge Establish and close the connection with MySQL server 1) Connect to the specified mysql server 2) Prompt in case of connection error 3) Set default character encoding 4) Select a specific database: mysqli_select_db ( $link , string $dbname); 5) Close the connection with mysql server 2, Realize login registr ...

Posted by midgar777 on Fri, 28 Jan 2022 19:58:28 +0100

Using Lambda expression to realize super sorting function

In the process of system development, sorting data is a very common scenario. Generally speaking, we can adopt two ways:With the help of the sorting function of the storage system (supported by SQL, NoSQL and NewSQL), the query result is the ordered resultThe query results are unordered data and sorted in memory.Today I want to talk about the s ...

Posted by phast1 on Fri, 28 Jan 2022 13:03:59 +0100

HTML+PHP+Mysql login registration page

1, PHP development landing page 1. Database construction First create a test database login table in mysql database: Set the following fields: id: it is unique, type int, and select the primary key. uesrname: user name, type varchar, length 30. Password: password, type varchar, length 30. Add a user name and password for testing A d ...

Posted by Alka-Seltzer on Fri, 28 Jan 2022 11:39:31 +0100

Generate Excel spreadsheet from the server (Node.js+SpreadJS)

Node.js is a JavaScript running environment based on Chrome V8 engine, which is usually used to create web applications. It can handle multiple connections simultaneously and is not thread dependent like most other models. For Web developers, the scenario of obtaining data from a database or Web server and then outputting it to an Excel file f ...

Posted by shadow1200 on Wed, 26 Jan 2022 14:24:17 +0100